How to set up VLAN network for BRT series on ASUSBRT-AC828 VPN Wi-Fi Router?

Introduction

A Virtual LAN(VLAN) is a logical LAN segment that is used to segregate a physical network into multiple virtual LAN network. This allows business enviroments to easily manage multiple networks without sacrificing security and restrict the broadcast domain size while reducing the chance of packet collision, and the VLAN network is required in business environment.

The following setting steps explain how to set up VLAN for dividing multiple networks within a company.

Contents

Network Topology

Divide network into different departments with VLAN.

Setting Procedure

1. Type router.asus.com or 192.168.1.1 on the address bar and login to the management web console.

※PVID(Port VLAN ID) assigns VLAN when it gets untagged frame to the port. If it gets tagged frame, the system refers VLAN ID and decide VLAN destination.

Tagged VLAN

Tagged VLAN means frames which belong to the same VLAN can be tagged with a VLAN ID , therefore, the virtual network can be built among multiple network switches via connecting trunk port of switch. To cascade multiple switch with the same VLAN network, you have to enable tagging on specified LAN interface.

On the following network topology, Port5 belongs to VLAN1 and VLAN2, transfer frame with tagged VLAN to another network appliance (ex. switch).

If you want to limit a certain VLAN’s incoming bandwidth usage, for instance to limit a guest VLAN’s download speed.

Step 1: Login in to your DSR. Click Advanced in top menu bar. Once the page has refreshed, in the left hand menu, hover over Advanced Network then Traffic Management, then click Bandwidth Profiles.

Step 2: If you have not already done so, you will need to tick the “Enable Bandwidth Profiles” tickbox, then click Save Settings. Click Add to create the inbound traffic limit.

Step 3: Name the Profile, for instance if you are creating the profile for VLAN 2 inbound traffic, you could name it VLAN2_Inbound. Change the Profile Type to “Rate”. In the Minimum Bandwidth Rate box, type the minimum bandwidth you would like that VLAN to get. This can be set to any value between 1Kbps and the Maximum Bandwidth Rate value. Set the Maximum Bandwidth Rate. This can be any value from 100Kbps to 1000000Kbps. Set the LAN Interface to be the LAN you want to limit bandwidth for.

Step 4: Click Save Settings to save this profile.

Step 5: You need to define a custom service for use in step 7. On the left hand menu, hover over Firewall Settings then click Custom Services.

Step 7: In the Available Profiles box, select the Profile we created earlier, in this case “VLAN_250_Inbound”. In theService box, select the service we created in Step 5 “CS_ANY”. In the Traffic Selector Match Type box, select IP. In the IP Address box type “0.0.0.0”. In the Subnet Mask box, type “255.255.255.0”.

Click Save Settings to save this traffic selector, and limit incoming traffic for all IP addresses on this VLAN.

Step 1: Log into the unit by entering the switch’s IP address in a web browser. The default username is adminwith no password.

Step2: Choose the menu L2 Features->VLAN->Static VLAN on the left hand side.

Step 3: In the row for VID 1 click the Modify button. Switch any port that will be untagged on your new VLAN to the None radio button for that port. Click Apply when finished.

Step 4: Click the Show All Static VLAN Entries link. Click on the Add button. Enter your desired VID and VLAN Name for your new VLAN. Any port you wish to be a member should have its Egress radio button selected. Untagged members require no further modification. Tagged members must also have the Tag check box checked. Hit Apply when finished.

A VLAN is a group of ports that can be anywhere in the network, but communicate as though they were in the same area.

VLANs can be easily organized to reflect department groups (such as R&D, Marketing), usage groups (such as e-mail), or multicast groups (multimedia applications such as video conferencing), and therefore help to simplify network management by allowing users to move devices to a new VLAN without having to change any physical connections.

The IEEE 802.1QVLAN Configuration page provides powerful VID management functions. The original settings have the VID as 01, named “default”, and all ports as “Untagged”.

Rename: Click to rename the VLAN group.Delete VID: Click to delete the VLAN group.Add New VID: Click to create a new VID group, assigning ports from 01 to 28 as Untag, Tag, or Not Member:A port can be untagged in only one VID. To save the VID group, press Apply.You may change the name accordingly to the desired groups, such as the aforementioned R&D, Marketing,email, etc.

1. Fixed DHCP server malfunction in MSSID mode.
2. Fixed associated more than 83 STAs AP will reboot. Current limitation of allowed connected STAs is 64.
3. Modify HouseKeeping period from 60 seconds to 10 seconds.
4. If a specific STA be silent for 5 more seconds, AP could send a null-data to trigger it up.